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TITLE OF THE INVENTION 

SERVICE VERIFYING SYSTEM, AUTHENTICATION 

REQUESTING TERMINAL, SERVICE UTILIZING TERMINAL, AND 
SERVICE PROVIDING METHOD 
5 BACKGROUND OF THE INVENTION 

Field of the Invention 

The present invention relates to a service 
verifying system for providing a plurality of services, 
an authentication requesting terminal to be 
10 authenticated by the service verifying system to 

utilize a service provided by the service verifying 
_ system, a service utilizing terminal for utilizing 
another service provided by the service verifying 
system on the basis of the result of the authentication 
15 of the authentication requesting terminal, and a 

service providing method. 
Related Background Art 
[0001] 

There are conventionally known systems for 
20 providing services for cell phones and PHSs in mobile 

communications and others. Each user needs to have a 
contract with a company providing services in order to 
utilize such services. Many of companies providing 
services provide services for only users having a 
25 contract for utilization of services (qualified users), 

but do not provide services for users without a 
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contract. For this reason, it is necessary to 
establish a scheme for letting only the qualified users 
utilize the services, and schemes of this type have 
already been substantialized heretofore. 
[0002] 

The existing service verifying systems for 
providing services employ a control system of managing 
customer information of qualified users, authenticating 
whether a user requesting utilization of a service is a 
qualified user, using the customer information, and 
permitting the utilization of the service only when the 



result of the authentication is affirmative. It is 
necessary to build up such a system, in order to let 
only the qualified users utilize the services. 
15 [Nonpatent Document 1] Bruce Schneier, "APPLIED 

CRYPTOGRAPHY, " John Wiley & Sons, Inc., 1996, pp. 52-56 

[Nonpatent Document 2] "NTT Docomo Technical 
Journal Vol. 9, No. 4," The Telecommunications 
Association, Jan 2002, pp. 34-43 
20 [Nonpatent Document 3] Keiji Tachikawa, "W-CDMA 

MOBILE COMMUNICATIONS SYSTEM," John Wiley & Sons, Ltd, 
2002, pp. 345-356 
SUMMARY OF THE INVENTION 
[0003] 

25 in the foregoing system, however, when a company 

providing a certain service starts providing another 
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service, it must establish a system for permitting only 
qualified users of contractants to access, from the 
beginning, which requires a lot of cost and design 
time. It is also necessary to perform the maintenance 
5 and management of the system in order to prevent 

suspension of the service due to failure or the like. 
As the scale of the system increases, the management 
cost tends to increase. In this respect there was room 
for further improvement in the foregoing system. 
10 [0004] 

An object of the present invention is, therefore, 
so ive the above problem and thereby provide a~ 
service verifying system, an authentication requesting 
terminal, a service utilizing terminal, a service 
15 verification network system, and a service providing 

method capable of curbing rise of cost. 
[0005] 

A service verifying system according to the 
present invention is a service verifying system for 

20 providing a plurality of services, comprising: 

authentication information storing means for storing 
authentication information to authenticate a user 
permitted to utilize a first service; available service 
information storing means for storing information about 

25 services available to respective users; permission 

message information storing means for, on the occasion 
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of permitting utilization of a second service different 
from the first service, storing message information 
based on a permission message to distinguish a 
permission of the utilization thereof; first message 
receiving means for receiving a message according to an 
authentication method of a first services- 
authenticating means for verifying the message received 
by the first message Receiving means, based on the 
authentication information in the authentication 
information storing means, to identify a user of the 
first service and authenticate whether the first 
"service is available to the user; other service 



OCX w w w 

utilization request receiving means for receiving a 
utilization request for utilization of the second 
15 service, which is transmitted from the user 

authenticated to utilize the first service by the 
authenticating means; other service availability 
determining means for, on the occasion of receiving the 
utilization request by the other service utilization 
request receiving means, determining whether the second 
service is available to the user, based on the 
information in the available service information 
storing means; permission message information updating 
me ans for, when the other service availability 
determining means determines that the second service is 
available, enabling the message information based on a 
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permission message in the permission message 
information storing means; permission response 
transmitting means for, when the other service 
availability determining means determines that the 
second service is available, transmitting a permission 
response based on the permission message; second 
message receiving means for receiving a message based 
on the permission response; service provision propriety 
determining means for verifying determines whether the 
second service is providable, based on the message 
received by the second message receiving means and the 



message information in the permission message 
information storing means; and permission message 
status releasing means for, when the service provision 
15 propriety determining means determines that the second 

service is providable, permitting utilization of the 
second service and disabling the message information in 
the permission message information storing means. 

The above service verifying system may be 
20 configured as a system for providing a plurality of 

services, comprising: authentication information 
storing means for storing authentication information to 
authenticate a user permitted to utilize a first 
service; available service information storing means 
25 for storing information about services available to 

respective users; permission message information 
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storing means for, on the occasion of permitting 
utilization of a second service different from the 
first service, storing message information for 
restoring a permission message to distinguish a 
permission of the utilization thereof; permission 
message status storing means for storing message status 
information indicating whether the message information 
is available; first message receiving means for 
receiving a message according to an authentication 
method of a first terminal; authenticating means for 
verifying the message received by the first message 



receiving means, based o^ the" authentication 
information stored in the authentication information 
storing means, to identify a user of the first terminal 
and authenticate whether the first service is available 
to the user; other service utilization request 
receiving means for receiving a utilization request for 
utilization of the second service, which is transmitted 
from the first terminal authenticated to utilize the 
first service by the authenticating means; other 
service availability determining means for, on the 
occasion of receiving the utilization request by the 
other service utilization request receiving means, 
determining whether the second service is available to 
the user, based on the information in the available 
service information storing means; permission message 
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status updating means for, when the other service 
availability determining means determines that the 
second service is available, storing the message 
information for restoring a permission message to 
distinguish a permission of utilization of the second 
service in the permission message information storing 
means and storing the message status information 
indicating a status that the message information is 
available, in the permission message status storing 
means; permission response transmitting means for, when 
the other service availability determining means 



determines that the second service is available, 
transmitting a permission response based on the 
permission message to the first terminal; second 
message receiving means for receiving a message based 
on the permission response, which is transmitted from a 
second terminal; service provision propriety 
determining means for verifying whether the message 
received by the second message receiving means is 
available, based on the message status information 
stored in the permission message status storing means, 
and whether consistency of the message is ensured, 
based on the message information stored in the 
permission message information storing means, to 
determine whether the second service is providable for 
the second terminal; and permission message status 
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releasing means for, when the service provision 
propriety determining means determines that the second 
service is providable, permitting utilization of the 
second service and changing the message status 
information in the permission message status storing 
means into an unavailable status. 
[0006] 

As described above, the service verifying system 
according to the present invention comprises the 
authenticating means and, when receiving from the first 
terminal a message according to the authentication 



^ method of the terminal, the authenticating means 
identifies the user of the first terminal and 
authenticates whether the first service is available to 

15 the first terminal, on the basis of the message. When 

the other service utilization request receiving means 
receives a utilization request for utilization of the 
second service transmitted from the first terminal in a 
state in which the user of the first terminal is 

20 authenticated as a qualified user by the 

authentication, the other service availability 
determining means determines whether the second service 
is available to the user, based on the available 
service information storing means. In this 

25 configuration, since the availability of the second 

service is determined in the state in which the user of 
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the first terminal is authenticated as a qualified 
user, the authentication of the second service can be 
omitted by utilizing the result of the authentication 
of the first service. When the result of the 
determination is that the second service is available, 
the message information for restoring a permission 
message to distinguish a permission is stored into the 
permission message information storing means, the 
message status information indicating the available 
status of the permission message is stored, and a 
permission response based on the permission message is 
~~ transmitted to the first terminal. When a message 

based on the permission message is sent thereafter from 
the second terminal, the message is received by the 
15 second message receiving means; it is verified on the 

basis of the permission message status storing means 
whether the permission message on which the message is 
based is in the available status; it is further 
verified whether the permission message is correctly 
20 configured, based on the message information stored in 

the permission message information storing means; and 
the second service is provided for the second terminal 
when the permission message is in the available status 
and when the permission message itself is correctly 
25 configured. As just described, when the service 

verifying system determines that the second service is 
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available, it transmits the permission response based 
on the permission message to the first terminal and the 
second terminal transmits the message based on the 
permission message received by the first terminal, to 
the service verifying system; whereby the service 
verifying system can determine whether the service is 
providable for the second terminal, by simply verifying 
whether the permission message on which the message 
transmitted from the second terminal is based is in the 
available state, without need for identifying the user 
of the second terminal. The use of the authentication 



result of the first service in the utilization of the 
second service, as described above, obviates the need 
for building up some new authenticating means in 
15 provision of the second service from the start, which 

can curtail the cost and design time. A method of 
informing the second terminal of the permission 
response received by the first terminal can be any 
method. For example, it may be transmitted from the 
20 first terminal to the second terminal by near field 

wireless communication, or a user looking at the first 
terminal may manually enter necessary information into 
the second terminal. The first terminal and the second 
terminal may be configured as a single terminal, and 
25 this configuration is preferable in that the permission 

response can be transmitted inside the terminal. 
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[0007] 

The above service verifying system may be 
configured as a system further comprising additional 
information storing means for storing additional 
information for verifying a message further based on 
additional information used for utilization of the 
second service; wherein the second message receiving 
means receives the message further based on the 
additional information; and wherein the service 
provision propriety determining means determines 
whether th e second service is providable, further based 
on the additional information in the additional 
information storing means, to verifying whether the 
second service is providable for the second terminal. 
[0008] 

The further use of the additional information as 
in the above configuration enhances the security and 
permits the second service to be provided more safely. 
Conceivable examples of the additional information 
include identification information to distinguish the 
second terminal, authentication information to 
authenticate the second terminal, and so on. 
[0009] 

The above service verifying system may be 
configured as a system further comprising: area 
information storing means for storing available area 
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information about an area where the second service is 
available; and area information updating means for, on 
the occasion of receiving the utilization request by 
the other service utilization request receiving means, 
deriving the available area information from 
information about a staying area of the first terminal 
and storing the available area information in the area 
information storing means; wherein the service 
provision propriety determining means further verifies 
whether a staying area of the second terminal is within 
an a rea where the service is available, based on the 
available area information in the area information 
storing means, and determines that the second service 
is providable, when a staying area of the second 
terminal is within an area where the service is 
available. 
[0010] 

When the system is constructed by adopting this 
configuration wherein upon reception of the utilization 
request for utilization of the second service the area 
information about the available area of the second 
service is derived from the staying area of the first 
terminal and stored as available area information in 
the area information storing means and wherein upon 
reception of the message from the second terminal it is 
determined on the basis of the area information storing 
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means whether the staying area of the second terminal 
is within the available area, to determine the 
propriety of provision of the second service, the 
second terminal is allowed to utilize the second 
service in the permitted area only, whereby the 
security is enhanced while reducing opportunities of 
misuse . 
[0011] 

The above service verifying system may be 
configured as a system wherein when the permission 
response is enable, based on the message information in 
the available message information storing means, and 
when the staying area of the first terminal moves off 
the available area proved by the available area 
15 information storing means, the area information 

updating means stores the available area information 
derived from information about the staying area after 
the movement of the first terminal, into the area 
information storing means. 
20 [0012] 

When the staying area of the first terminal 
authenticated moves, the area information updating 
means updates the available area information stored in 
the area information storing means, as described above, 
25 whereby it also becomes feasible for the system to 

adapt to cases where the user moves. 
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[0013] 

The above service verifying system may be 
configured as a system wherein when the permission 
response is enable, based on the message information in 
5 the available message information storing means, when 

the staying area of the first terminal moves off the 
available area proved by the available area information 
storing means, and when the other service utilization 
request receiving means receives the utilization 
10 request, the area information updating means stores the 

available area information derived from information 
about the staying area after the movement of the first 
terminal, in the area information storing means. 
[0014] 

After movement of the staying area of the first 
terminal authenticated, the available area information 
is derived from the staying area of the first terminal 
at the time of receiving the other service utilization 
request by the other service utilization request 
receiving means, as described above, whereby it also 
becomes feasible for the system to adapt to cases where 
the user moves. 
[0015] 

The above service verifying system may be 
configured as a system further comprising: time 
information storing means for storing available time 
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information about a time period in which the second 
service is available; and 

time information updating means for, on the 
occasion of receiving the utilization request by the 
other service utilization request receiving means, 
storing available time information into the time 
information storing means; 

wherein the service provision propriety 
determining means further verifies whether a time when 
the second message receiving means receives the message 
is within the time period in which the service is 
available, based on the available time information 
stored in the time information storing means, and 
wherein when the time of reception of the message is 
within the time period in which the second service is 
available, the service provision propriety determining 
means determines that the second service is providable. 
[0016] 

When the system is constructed by adopting this 
configuration wherein the time period in which the 
second service is available is stored as available time 
information in the time information storing means and 
wherein upon transmission of the message from the 
second terminal it is determined whether the reception 
time of the message is within the available time period 
of the second service, to determine the propriety of 
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provision of the second service, the second terminal is 
allowed to utilize the second service within the 
permitted time period only, whereby the security can be 
enhanced while reducing opportunities of misuse. The 
5 available time period of the second service can be set, 

for example, by a method of setting a period of some 
minutes after transmission of the permission response 
to the first terminal, or by a method of setting the 
time period according to a type of the second service. 
10 [0017} 

The above service verifying system may be 
configured as a system wherein the permission response 
transmitting means transmits the permission response 
further based on available area information derived 

15 from information about a staying area of the first 

terminal, and wherein the service provision propriety 
determining means further verifies whether a staying 
area of the second terminal is within an area where the 
service is available, based on the message received by 

20 the second message receiving means, and determines that 

the second service is providable, when a staying area 
of the second terminal is within an area where the 
service is available. 
[0018] 

25 When the system is constructed by adopting this 

configuration wherein upon reception of the utilization 
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request for utilization of the second service the area 
information about the available area of the second 
service is derived from the staying area of the first 
terminal, wherein the permission response further based 
5 on the available area information is transmitted to the 

first terminal, and wherein upon transmission of the 
message from the second terminal it is determined 
whether the second terminal is in the available area on 
which the message is based, to determine the propriety 
10 of provision of the second service, the second terminal 

is allowed to utilize the second service in the 
permitted area only, whereby the security can be 
enhanced, while reducing opportunities of misuse, and 
whereby the service verifying system can be constructed 
in the configuration without need for storing the 
information about the available area- 
[0019] 

The above service verifying system may be 
configured as a system wherein the permission response 
transmitting means transmits the permission response 
further based on available time information, and 
wherein the service provision propriety determining 
means further verifies whether a time when the second 
message receiving means receives the message, is within 
the time period derived from the message received by 
the second message receiving means, and wherein when 
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20 



the time of reception of the message is within a time 
period in which the service is available, based on the 
message received by the second message receiving means, 
the service provision propriety determining means 
determines that the second service is providable. 
[0020] 

When the system is constructed by adopting this 
configuration wherein the permission response further 
based on the available time information about the 
available time period of the second service is 
transmitted to the first terminal and wherein upon 
transmission of the message from the second terminal it 
is determined whether the reception time of the message 
is within the available time period on which the 
15 message is based, to determine the propriety of 

provision of the second service, the second terminal is 
allowed to utilize the second service in the permitted 
time period only, whereby the security can be enhanced, 
while reducing opportunities of misuse, and whereby the 
service verifying system can be constructed in the 
configuration without need for storing the information 
about the available time period. 
[0021] 

An authentication requesting terminal according 
to the present invention is an authentication 
requesting terminal permitted to utilize a first 
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service provided by a service verifying system and 
configured to execute authentication for utilization of 
the first service, the authentication requesting 
terminal comprising: authentication information storing 
5 means for storing authentication information for 

utilization of the first service; first message 
transmitting means for transmitting a message based on 
the authentication information in the authentication 
information storing means and according to an 

10 authentication method; other service utilization 

request transmitting means for transmitting a 
utilization request for utilization of a second service 
when the first service is available; and permission 
response receiving means for receiving a permission 

15 response based on a permission message. 

[0022] 

When the authentication requesting terminal is 
configured, as described above, to transmit the message 
based on the authentication information for utilization 

20 of the first service to the service verifying system 

and transmit the utilization request for utilization of 
the second service in the state in which the user is 
authenticated as a qualified user by the service 
verifying system, the authentication can be omitted for 

25 the second service by making use of the authentication 

result of the first service. The authentication 
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requesting terminal has the permission response 
receiving means to receive the permission response 
based on the permission message- If the second 
terminal (service utilizing apparatus) is informed of 
this permission response, the second terminal can 
transmit a message based on the permission response to 
the service verifying system, and the service verifying 
system can verify whether the permission message on 
which the message is based is in the available status, 
whereby the second terminal can utilize the second 
without need for conducting independent 
authentication thereof. The authentication requesting 
terminal itself may be provided with the function of 
the second terminal, and in this case, it is also 
feasible to enjoy the merit of capability of omitting 
the authentication on the occasion of utilization of 
the second service, 
[0023] 

The above authentication requesting terminal may 
be configured as a terminal wherein the permission 
response receiving means receives a permission response 
further based on available area information of the 
second service. 
[0024] 

The permission response receiving means receives 
the permission response further based on the available 
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area information, and if a message based on this 
permission response is transmitted to the service 
verifying system, the service verifying system can 
determine whether the second terminal is in the 
available area on which the message is based. This 
limits the available area of the second service and the 
security can be enhanced, while reducing opportunities 
of misuse. 
[0025] 

The above authentication requesting terminal may 
be configured as a terminal wherein the permission 
response receiving means receives a permission response 
further based on available time information of the 
second service. 
[0026] 

The permission response receiving means receives 
the permission response further based on the available 
time information, and if a message based on this 
permission response is transmitted to the service 
verifying system, the service verifying system can 
determine whether the message reception time from the 
second terminal is within the available time period on 
which the message is based. This limits the available 
time period of the second service whereby the security 
is enhanced, while reducing opportunities of misuse. 
[0027] 
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A service utilizing terminal according to the 
present invention is a service utilizing terminal for, 
based on a response transmitted to the authentication 
requesting terminal for the second service, receiving 
5 provision of a second service, the service utilizing 

terminal comprising: second message transmitting means 
for transmitting a message for utilization of the 
second service, based on a permission response received 
by the authentication requesting terminal; wherein the 
10 message is based on a permission response received by 

the authentication requesting terminal from the service 
verifying system. 
[0028] 

When the message based on the permission response 
received by the authentication requesting terminal is 
transmitted to the service verifying system, as 
described above, the service verifying system can 
determine whether the permission message on which the 
message transmitted is based is in the available 
status, whereby the service utilizing terminal can 
utilize the second service, without need for 
authentication of the user. 
[0029] 

The above service utilizing terminal may be 
configured as a terminal further comprising additional 
information storing means for storing additional 
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information used for utilization of the second service, 
wherein the message transmitted by the second message 
transmitting means is further based on the additional 
information in the additional information storing 
5 means. 

[0030] 

The further use of the additional information in 
this way enhances the security whereby the second 
service can be provided more safely. Conceivable 
10 examples of the additional information include 

identification information to distinguish the service 



utilizing terminal, authentication information to 
authenticate the service utilizing terminal, and so on. 
[0031] 

X5 a service providing method according to the 

present invention is a service providing method for 
providing services in a service verification network 
system, the service verification network system 
comprising a service verifying system for providing a 

20 plurality of services, an authentication requesting 

terminal authenticated by the service verifying system 
to utilize a first service provided by the service 
verifying system, and a service utilizing terminal for 
utilizing a second service provided by the service 

25 verifying system, based on a response transmitted to 

the authentication requesting terminal for the second 
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service, said service providing method comprising: a 
first message transmitting step wherein the 
authentication requesting terminal transmits a message 
based on authentication information to the service 
5 verifying system, according to an authentication 

method; an authenticating step wherein the message 
received in the first message transmitting step is 
verified based on authentication information previously 
stored in the service verifying system, to identify a 
10 user of the authentication requesting terminal and 

authenticate whether the first service is available to 

the user of the first service; an other service 
utilization request transmitting step wherein when the 
first service is available, the authentication 
15 requesting terminal transmits a utilization request for 

utilization of the second service to the service 
verifying system; an other service availability 
determining step wherein when the utilization request 
is received in the other service utilization request 
20 transmitting step, the service verifying system 

determines whether the second service is available to 
the user, based on an information about services 
available to respective users previously stored in the 
service verifying system; a permission message 
25 information updating step wherein when it is determined 

in the other service availability determining step that 
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the second service is available, the service verifying 
system stores message information based on a permission 
message to distinguish a permission of utilization of 
the second service, into permission message information 
storing means; a permission response transmitting step 
wherein when it is determined in the other service 
availability determining step that the second service 
is available, the service verifying system transmits a 
permission response based on the permission message, to 
the authentication requesting terminal; a second 
message transmitting step wherein the service utilizing 
terminal transmits a message based on the permission 
response received by the authentication requesting 
terminal in the permission response transmitting step, 
15 to the service verifying system; a service provision 

propriety determining step wherein it is verified 
whether the second service is providable, based on the 
message received by the second message receiving step 
and the message information in the permission message 
20 information storing means; and a permission message 

status releasing step wherein when it is determined in 
the service provision propriety determining step that 
the second service is providable, utilization of the 
second service is permitted, and disabling the message 
25 information in the permission message information 

storing means. 
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[0032] 

The service providing method according to the 
present invention, as described above, comprises the 
authenticating step wherein the user of the 
authentication requesting terminal is identified by the 
message according to the authentication method of the 
authentication requesting terminal, which is 
transmitted from the authentication requesting 
terminal, and wherein it is authenticated whether the 
first service is available to the authentication 
requesting terminal. When the utilization request for 



, utilization of the second service transmitted from the 

authentication requesting terminal is received 
thereafter in the other service utilization request 

15 transmitting step in the state in which the user of the 

authentication requesting terminal is authenticated as 
a qualified user in the authenticating step, whether 
the second service is available to the user is 
determined based on the available service information 

20 storing means in the other service availability 

determining step. In this configuration, where the 
availability of the second service is determined in the 
state in which the user of the authentication 
requesting terminal is authenticated as a qualified 

25 user, the authentication of the second service can be 

omitted by making use of the authentication result of 
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the first service- When the result of the 

determination is that the second service is available, 
the message information for restoring the permission 
message to distinguish the permission of utilization is 
stored into the permission message information storing 
means, the message status information indicating that 
the permission message to distinguish the permission of 
utilization is in the available status is stored, and 
the permission response based on the permission message 
is transmitted to the authentication requesting 
terminal- When in the second message transmitting step 



the utilization request based on the permission 
response is transmitted thereafter from the service 
utilizing terminal, the utilization request is 
15 received, and whether the permission message on which 

the message is based is in the available status is 
verified based on the permission message status storing 
means. Furthermore, whether the permission message is 
correctly configured is verified based on the message 
20 information stored in the permission message 

information storing means, and the second service is 
provided for the service utilizing terminal when the 
permission message is in the available status and when 
the permission message itself is determined to be 
25 correctly configured. When the second service is 

determined to be available, the permission response 



27 



FP03-0250-00 



based on the permission message is transmitted to the 
authentication requesting* terminal and the service 
utilizing terminal transmits the message based on the 
permission response received by the authentication 
requesting terminal, to the service verifying system; 
whereby the service verifying system can determine 
whether the service is providable for the service 
utilizing terminal, by simply determining whether the 
status of the permission message on which the message 
transmitted in the second message transmitting step is 
based is in the available status, without need for 
identifying the user of the service utilizing terminal. 
By using the. authentication result of the first service 
in the utilization of the second service, as described 
above, there is no need for building up a new 
authenticating means in provision of the second service 
from the start, whereby it is feasible to curtail the 
cost and system design time. A method of informing the 
service utilizing terminal of the permission response 
received by the authentication requesting terminal can 
be any method. For example, the response can be 
transmitted from the authentication requesting terminal 
to the service utilizing terminal by near field 
wireless communication, or the user looking at the 
authentication requesting terminal can manually enter 
necessary information into the service utilizing 
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terminal. The authentication requesting terminal and 
the service utilizing terminal can be configured as a 
single terminal, and this configuration is preferable 
in that the permission message can be transmitted 
5 inside the terminal. 

[0033] 

The above service providing method may be 
configured as a method wherein the second message 
receiving step receives a message further based on 

10 additional information, and wherein the service 

provision propriety determining step determines whether 
the second service is providable, further based on the 
additional information in the additional information 
storing means. 

15 [0034] 

The further use of the additional information as 
in the above configuration enhances the security and 
permits the second service to be provided more safely. 
Conceivable examples of the additional information 
20 include identification information to distinguish the 

service utilizing terminal, authentication information 
to authenticate the service utilizing terminal, and so 
on . 

[0035] 

25 The above service providing method may be 

configured as a method further comprising an area 
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information updating step of, on the occasion of 
receiving the utilization request in the other service 
utilization request transmitting step, deriving 
available area information from information about a 
5 staying area of the authentication requesting terminal 

and storing the available area information into area 
information storing means, wherein the service 
provision propriety determining step further verifies 
whether a staying area of the service utilizing 
10 terminal is within an area where the service is 

available, based on the available area information in 



the area information storing means, and determines that 
the second service is providable, when a staying area 
of the service utilizing terminal is within an area 
15 where the service is available. 

[0036] 

When the service providing method is configured 
in such a way that when in the other service 
utilization request transmitting step the utilization 

20 request for utilization of the second service is 

received by the service verifying system, the available 
area of the second service is derived from the staying 
area of the authentication requesting terminal and is 
stored as available area information into the area 

25 information storing means and that when in the second 

message transmitting step the message is transmitted 
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from the service utilizing terminal, it is determined 
whether the service utilizing terminal is within the 
available area stored in the area information storing 
means, to determine the propriety of provision of the 
5 second service, the service utilizing terminal is 

allowed to utilize the second service in the permitted 
area only, whereby the security can be enhanced, while 
reducing opportunities of misuse. 
[0037] 

10 T he above service providing method may be 

configured as a method wherein when the permission 
response is enable, based on the message information in 
the available message information storing means, and 
when the staying area of the authentication requesting 

15 terminal moves off the available area proved by 

available area information storing means, the area 
information updating step stores the available area 
information derived from information about the staying 
area after the movement of the terminal, in the area 

20 information storing means. 

[0038] 

With movement of the staying area of the 
authentication requesting terminal authenticated, as 
described above, the available area information in the 
area information storing means is updated, whereby it 
also becomes feasible to adapt to cases where the user 
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moves . 
[0039] 



The above service providing method may be 
configured as a method wherein when the permission 
response is enable, based on the message information in 
the available message information storing means, and 
when the staying area of the authentication requesting 
terminal moves off the available area proved by the 
area information storing means, when the authentication 
requesting terminal transmits the utilization request 
for utilization of the second service in the other 
service utilization request transmitting step, the area 
information updating step stores the available area 
information derived from information about the staying 
area after the movement of the terminal, in the area 
information storing means. 

After movement of the staying area of the first 
terminal (authentication requesting terminal) 

authenticated, the available area information is 
derived from the staying area of the first terminal at 
the time of receiving the other service utilization 
request in the other service utilization request 
receiving step, as described above, whereby it also 
becomes feasible to adapt to cases where the user 



moves • 
[0040] 
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The above service providing method may be 
configured as a method further comprising a time 
information updating step of, on the occasion of 
receiving the utilization request in the other service 
utilization request transmitting step, storing 
available time information about a time period in which 
the second service is available, into time information 
storing means, wherein the service provision propriety 
determining step further verifies whether a time when 
the service verifying system receives the message in 
the second message transmitting step is within the time 
period in which the service is available, based on the 
available time information stored in the time 
information storing means, and wherein when the time of 
reception of the message is within the time period in 
which the second service is available, the service 
provision propriety determining means determines that 
the second service is providable. 
10041] 

When the method is configured in such a way that 
the available time period of the second service is 
stored as available time information in the time 
information storing means and that upon transmission of 
the message from the second terminal (service utilizing 
25 terminal) in the second message transmitting step it is 

determined whether the reception time of the message is 
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within the available time period, to determine the 
propriety of provision of the second service, the 
second terminal is allowed to utilize the second 
service within the permitted time period only, whereby 
5 the security can be enhanced, while reducing 

opportunities of misuse. The available time period of 
the second service can be set, for example, by a method 
of setting a period of some minutes after transmission 
of the permission response to the authentication 
10 requesting terminal, or by a method of setting the time 

period according to a type of the second service. 

[0042] 

The above service providing method may be 
configured as a method wherein the permission response 
15 transmitting step transmits the permission response 

further based on available area information derived 
from information about a staying area of the 
authentication requesting terminal, and wherein the 
service provision propriety determining step further 
20 verifies whether a staying area of the service 

utilizing terminal is within an area where the service 
is available, based on the message received by the 
second message receiving means, and determines that the 
second service is providable, when a staying area of 
25 the service utilizing terminal is within an area where 

the service is available. 
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[0043] 

When the method is configured in such a way that 
upon reception of the utilization request for 
utilization of the second service the area information 
5 about the available area of the second service is 

derived from the staying area of the first terminal, 
(authentication requesting terminal) that the 
permission response further based on the available area 
information is transmitted to the first terminal, and 
10 that upon transmission of the message from the second 

terminal (service utilizing terminal) it is determined 

whether the second terminal is in the available area on 
which the message is based, to determine the propriety 
of provision of the second service, the second terminal 
15 is allowed to utilize the second service in the 

permitted area only, whereby the security can be 
enhanced, while reducing opportunities of misuse, and 
whereby the service verifying system can be constructed 
in the configuration without need for storing the 
20 information about the available area. 

[0044] 

The above service providing method may be 
configured as a method wherein the permission response 
transmitting step transmits the permission response 
25 further based on available time information, and 

wherein the service provision propriety determining 



35 



FP03-0250-00 



step further verifies whether a time when the service 
verifying system receives the message in the second 
message transmitting step is within a time period 
derived from the message received by the second message 
5 receiving means, and wherein when the time of reception 

of the message is within the time period in which the 
service is available, based on the message received by 
the second message receiving means, the service 
provision propriety determining means determines that 
10 the second service is providable. 

[0045] 

When the method is configured in such a way that 
the permission response further based on the available 
time information about the available time period of the 
second service is transmitted to the first terminal and 
that upon transmission of the message from the second 
terminal it is determined whether the reception time of 
the message is within the available time period on 
which the message is based, to determine the propriety 
of provision of the second service, the second terminal 
is allowed to utilize the second service in the 
permitted time period only, whereby the security can be 
enhanced, while reducing opportunities of misuse, and 
whereby the service verifying system can be constructed 
in the configuration without need for storing the 
information about the available time period. 
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[0046] 

According to the present invention, it is 
determined whether the second service is available to 
the user of the authentication requesting terminal, in 
the state in which the user of the authentication 
requesting terminal is authenticated as a qualified 
user by the authentication conducted by the 
authenticating means, so that the authentication of the 
second service can be omitted by making use of the 
authentication result of the first service. Then the 
permission message to distinguish the permission of 
utilization is stored and the permission response based 
on the permission message is transmitted to the 
authentication requesting terminal. When the 

15 utilization request message based on the utilization 

response informed of by the authentication requesting 
terminal is transmitted from the second terminal, the 
message status information of the permission message on 
which the utilization request message is based is 
20 verified on the basis of the permission message status 

DB, and when it is in the available status, the second 
service is provided for the second terminal. This 
permits the service verifying system to determine the 
propriety of provision of the service for the second 
25 terminal by only verifying the status of the permission 

message, without need for identifying the user of the 
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second terminal. As described above, the use of the 
authentication result of the first service in the 
utilization of the second service obviates the need for 
building up the new authenticating means in provision 
5 of the second service from the start and thus can 

reduce the cost and design time. 
[0047] 

The present invention will become more fully 
understood from the detailed description given 
10 hereinbelow and the accompanying drawings which are 

given by way of illustration only, and thus are not to 
be considered as limiting the present invention. 
[0048] 

Further scope of applicability of the present 
15 invention will become apparent from the detailed 

description given hereinafter. However, it should be 
understood that the detailed description and specific 
examples, while indicating preferred embodiments of the 
invention, are given by way of illustration only, since 
20 various changes and modifications within the spirit and 

scope of the invention will become apparent to those 
skilled in the art from this detailed description. 
BRIEF DESCRIPTION OF THE DRAWINGS 

The present invention may be more readily 
25 described with reference to the accompanying drawings, 

in which: 
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Fig. 1 is a block diagram showing a configuration 
of a service verification network system according to 
an embodiment ; 

Fig. 2 is an illustration showing an example of 
5 data items stored in an authentication information DB; 

Fig. 3 is an illustration showing an example of 
data items stored in an available service information 
DB; 

Fig. 4 is an illustration showing an example of 
10 data items stored in an available permission message 

status DB; 

Fig. 5 is a flowchart showing the operation of 
the service verification network system according to 
the first embodiment; 

Fig. 6 is a flowchart showing the authentication 
process; 

Fig. 7 is a block diagram showing a configuration 
of a service verifying system according to the second 
embodiment; 

Fig. 8 is an illustration showing an example of 
data stored in an area information DB; 

Fig. 9 is an illustration showing an example of 
data stored in a time information DB; 

Fig. 10 is a flowchart showing the operation of 
the service verification network system according to 
the second embodiment; and 
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Fig. 11 is a flowchart showing the operation of 
the service verification network system according to 
the third embodiment. 

DESCRIPTION OF THE PREFERRED EMBODIMENTS 
5 [0049] 

The preferred embodiments of the service 
verification network system according to the present 
invention will be described below in detail with 
reference to the drawings. The same elements will be 
10 denoted by the same reference symbols throughout the 

description of the drawings, without redundant 
description. 
[0050] 

(First Embodiment) 

15 Fig. 1 is a block diagram showing the 

configuration of service verification network system 1 
according to the first embodiment of the present 
invention. As shown in Fig. 1/ the service 

verification network system 1 has service verifying 

20 system 10, authentication requesting terminal 30, and 

service utilizing terminal 40. Each of the components 
will be first outlined. The service verifying system 
10 has a function of providing a plurality of services. 
The authentication requesting terminal 30 is a terminal 

25 utilizing a service A (first service) provided by 

service verifying system 10 and terminal to be 
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authenticated by service verifying system 10 in order 
to utilize the service A. The service utilizing 
terminal 40 is a terminal utilizing another service B 
(second service) provided by service verifying system 
10. An example of the services provided in the service 
verification network system 1 according to the present 
embodiment include the wireless telephone service as 
service A and the wireless LAN service as service B; in 
this case, the authentication requesting terminal 30 
can be ass um ed to be a mobile phone terminal and the 
service utilizing terminal 40 a PC with a wireless LAN 
card. The authentication requesting terminal 30 and 
service utilizing terminal 40 may be configured as a 
single terminal. An example of the single terminal can 
15 be assumed to be Doccimo (registered trademark) which 

is a single terminal capable of using both the mobile 
phone and PHS services, for example. 
[0051] 

Service verifying system 10 is provided with 
2 0 three databases of authentication information storing 

device (referred to as "authentication information DB n ) 
11, available service information storing device 
(referred to as "available service information DB n ) 12, 
and permission message status storing device (referred 
25 to as "permission message status DB") 13, communication 

devices 14, 15 for communications with the respective 

41 
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terminals of authentication requesting terminal 30 and 
service utilizing terminal 40, authenticating device 
16, other service availability determining device 17, 
permission message status updating device 18, service 
provision propriety determining device 19, and 
permission message status releasing device 20. 
Although the service verifying system 10 is constructed 
as a single device herein, it may also be constructed 
of a plurality of devices. For example, service 
verifying system 10 may be separated into a first 
device comprised of authenti cation information DB 11, 
authenticating device 16, and communication device 14; 



a second device comprised of available service 
information DB 12, other service availability 
determining device 17, communication device 14, 
permission message status updating device 18, and 
permission message status DB 13; and a third device 
comprised of service provision propriety determining 
device 19, communication device 15, and permission 
message status updating device 20. Although the 
service verifying system 10 is provided with three 
databases herein, it may also be provided with two 
databases, authentication information DB and available 
service information DB, 
[0052] 

Authentication information DB 11 is a database 
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storing authentication information for authenticating 
users to which the service A is available. Fig. 2 is 
an illustration showing an example of data items stored 
in authentication • information DB 11. As shown in Fig. 
2, authentication information DB 11 stores data of 
items indicated by "ID," "password, " "shared secret," 
"private key," "public key," and "authentication 
method."- Concerning the items other than "ID, " the 
contents of data are omitted from illustration. "ID" 
is identification information for identifying users to 
which the service A is available- Each of the 



information of "password," "shared secret," "private 
key, " and "public key" is information necessary for 
authentication. "Authentication method" is information 
indicating which method is used for authentication, and 
the inclusion of this information permits the system to 
change methods of authentication according to users. 
Authentication information DB 11 may be configured to 
store data of items other than the data items shown in 
Fig. 2. 
[0053] 

Available service information DB 12 is a database 
storing information about services available to 
respective users. Fig. 3 is an illustration showing an 
example of data items stored in available service 
information DB 12. As shown in Fig. 3, available 
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service information DB 12 stores data of items 
indicated by "ID" and "service B." "ID" is 

identification information for identifying users, just 
as the ID in authentication information DB 11 was. 
"Service B" is a service different from the service A, 
which is provided by service verifying system 10. The 
example herein has the information about the service B, 
and as to this item, if there are other services 
provided by service verifying system 10, items stored 
in the available service information DB 12 increase or 
decrease according to the number of services. It is 
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een with reference to Fig. 3 that the user with ID of 
U100 is allowed to utilize the service B as well as the 
service A and that the user with ID of U101 is not 
15 allowed to utilize the service B. 

[0054] 

Permission message status DB 13 is a database 
that, on the occasion of permitting utilization of the 
service B different from the service A, stores message 
status information of a permission message to 
distinguish the permission of the utilization. Fig. 4 
is an illustration showing an example of data items 
stored in permission message status DB 13. As shown in 
Fig. 4, permission message status DB 13 stores data of 
items indicated by "permission ID" and "status." 
-Permission ID" is identification information for 
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identifying a permission message. A permission ID 
identifies a permission of utilization of the service B 
for a certain user. The permission ID may be a 
permission message itself, and in the present example 
the permission ID is assumed to be a permission 
message. "Status" is information indicating whether 
the service B indicated by the permission ID is 
available. When the system provides a plurality of 
services, permission message status DB 13 is configured 
to have tables as shown in Fig. 4, for the respective 
services. The permission message status DB 13 



according to the present embodiment stores tEi~ 
permission IDs (permission messages) and has a role as 
the permission message information storing means for 
storing the message information for restoring the 
permission messages. In the present example the 
permission message status information DB 13 stores the 
permission messages and message status information 
together, but it is also possible to employ a 
20 configuration having storages for separately storing 

such information entities. When the permission 

messages and message status information are separately 
stored, the two information entities can be correlated 
with each other, for example, by permission IDs. 
2 5 [0055] 

Communication device 14 has a function of 
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conducting communication with authentication requesting 
terminal 30. Specifically, communication device 14 has 
the following functions: 1) a function as the first 
message receiving means for receiving the 
authentication information transmitted from 

authentication requesting terminal 30; 2) a function as 
the authentication result transmitting means for 
transmitting the result of the authentication to 
authentication requesting terminal 30; 3) a function as 
the other service utilization request receiving means 
for receiving a utilization request for utilization of 



the service B transmitted from authentication 
requesting terminal 30; 4) a function as the permission 
response transmitting means for transmitting a 
15 permission response to authentication requesting 

terminal 30 when the service B is available; and so on. 
[0056] 

The communication device 15 has a function of 
conducting communication with service utilizing 

20 terminal 40. Specifically, this communication device 

15 has the following functions: 1) a function as the 
second message receiving means for receiving a 
utilization request for utilization of the service B 
transmitted from service utilizing terminal 40; 2) a 

25 function of providing the service for service utilizing 

terminal 40; and so on. A message of the utilization 
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request for utilization of the service transmitted from 
service utilizing terminal 40 is based on a permission 
response received by authentication requesting terminal 
30. In the present example the system is constructed 
5 by adopting the configuration having the two 

communication devices 14, 15 for communicating with the 
respective terminals of authentication requesting 
terminal 30 and service utilizing terminal 40 , but a 
single communication device will suffice for 
10 communications with each of the terminals 30, 40 if the 

same communication protocol is applied to 
communications with authentication requesting terminal 
30 and with service utilizing terminal 40, 
[0057] 

15 Authenticating device 16 has a function of, using 

a message received by communication device 14 from 
authentication requesting terminal 30, identifying the 
user of authentication requesting terminal 30 and 
authenticating whether the service A is available to 

20 the user. The authenticating device 16 is connected to 

authentication information DB 11 and verifies the 
authentication information in the message received from 
the authentication requesting terminal 30, based on the 
authentication information stored in authentication 

25 information DB 11, to authenticate whether the user of 

authentication requesting terminal 30 having 
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transmitted the message is a qualified user. The 
authentication herein can be implemented by adopting 
the method of ID and password matching, the public key 
cryptography, or the like. After the user is 
authenticated as a qualified user, the user becomes 
allowed to utilize the service A provided by service 
verifying system 10, through authentication requesting 
terminal 30. 
[0058] 

Other service availability determining device 17 
has a function of, when communication device 14 



receives a utilization request for utilization of the 
other service transmitted from the authentication 
requesting terminal 30, determining whether the service 
15 is available to the user of authentication requesting 

terminal 30. The other service availability 

determining device 17 is connected to available service 
information DB 12, and, on the occasion of transmission 
of the utilization request for utilization of the other 
service, it determines whether the service is available 
to the user of the authentication requesting terminal 
30, with reference to available service information DB 
12. For example, in the case of the available service 
information DB 12 shown in Fig. 3, where the 
utilization request for utilization of the service B is 
received from authentication requesting terminal 30 
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authenticated as the user ID of U101, the other service 
availability determining device 17 determines that the 
service is unavailable . 
[0059] 

Permission message status updating device 18 has 
a function of updating the permission message status DB 
13. Specifically/ where the other service availability 
determining device 17 determines that the other service 
is available, the permission message status updating 
device 18 assigns a permission of the utilization an ID 
(permission ID) and updates the database so as to add 
the new ID. The "status" at this time becomes 
available (as indicated by mark o in Fig. 3) . 
[0060] 

15 Service provision propriety determining device 19 

has a function of, when communication device 15 
receives a service utilization request from service 
utilizing terminal 40, determines whether the service B 
is providable for service utilizing terminal 40. 

2 0 Service provision propriety determining device 19 

verifies the message status information of the 
permission message on which the utilization request 
message is based, on the basis of permission message 
status DB 13, to determine whether the service is 

25 providable. When the status of the permission message 

is available, the service B is determined to be 



5 



10 



49 



FP03-0250-00 

providable . 
[00611 

Permission message status releasing device 20 has 
a function of updating the status of a permission 
5 message from the available status to an unavailable 

status when a message is transmitted from service 
utilizing terminal 40 and when service provision 
propriety determining device 19 determines that the 
service is providable. Namely, when the other service 
10 is provided once upon reception of the utilization 

request containing the utilization permission message, 
the status is updated to the unavailable status (as 
indicated by mark x in Fig. 3) . By avoiding acceptance 
of multiple utilization requests using one utilization 
message in this way, the risk of abuse by third parties 
can be reduced even if the third parties come to know 
the permission message. 
[0062] 

Next, authentication requesting terminal 30 
according to the present embodiment will be described- 
The authentication requesting terminal 30 according to 
the present embodiment has authentication information 
storing device (referred to as "authentication 
information DB") 31, first message transmitting device 
33, authentication result receiving device 34, other 
service utilization request transmitting device 35, 
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permission response receiving device 36, and 
coitimunicatiori device 32, as shown in Fig. 1. 
[0063] 

Authentication information DB 31 is a database 
storing the authentication information for utilization 
of the first service, in which items of data stored are 
the same as in authentication information DB 11 of 
service verifying system 10 (cf. Fig. 2). 
[0064] 

First message transmitting device 33 has a 
function of extracting the authentication information 
stored in authentication information DB 31 and 
transmitting a message for authentication to service 
verifying system 10. The information extracted from 
15 authentication information DB 31 differs depending upon 

the authentication methods; for example, in the case of 
the authentication by a password, the information 
extracted includes an ID, a password, and an 
authentication method; in the case of the 
20 authentication by private key cryptography, the 

information extracted includes an ID, a private key, 
and an authentication method, and a predetermined 
message is encrypted by the private key. In either 
case, the information about the authentication method 
25 is information necessary for matching of the 

authentication method between authentication requesting 
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terminal 30 and service verifying system 10. 
[0065] 

Authentication result receiving device 34 has a 
function of receiving the result of the authentication 
transmitted from service verifying system 10. 
[0066] 

Other service utilization request transmitting 
device 35 has a function of transmitting a utilization 
request for utilization of the service B. Other 
service utilization request transmitting device 35 
transmits the utilization request for utilization of 
the service B when it is determined that the service A 
is available, based on the result of the authentication 
received by authentication result receiving device 34. 
[0067] 

Permission response receiving device 36 has a 
function of receiving a permission response based on a 
permission message transmitted from service verifying 
system 10. 
[0068] 

Communication device 32 has a function of 
performing communication with service verifying system 
10. 

[0069] 

Service utilizing terminal 40 according to the 
present embodiment will be described below. Service 
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utilizing terminal 40 has second message transmitting 
device 41 and communication device 42 , as shown in Fig. 
1. 

[0070] 

5 Second message transmitting device 41 has a 

function of preparing and transmitting a message to 
request utilization of the service B different from the 
authenticated service A. Second message transmitting 
device 41 prepares a message based on the permission 

10 response received through permission response receiving 

device 36 by authentication requesting terminal 30. 
For example, the message of utilization request can be 
prepared by processing the permission response by a 
predetermined function. In this method, the permission 

15 message is not revealed at authentication requesting 

terminal 30 and at service utilizing terminal 40, and 
it is thus feasible to decrease the risk of leakage of 
the information. Any method can be adopted as a method 
of transmitting the permission response from 

20 authentication requesting terminal 30 to service 

utilizing terminal 40. For example, authentication 
requesting terminal 30 and service utilizing terminal 
4 0 can be made communicable by near field wireless 
communication, or may be connected by a cable. The 

25 permission response may also be transmitted by letting 

the user enter the permission message displayed on a 
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display device of authentication requesting terminal 

30, into service utilizing terminal 40. 

[0071] 

The operation of service verification network 
system 1 according to the present embodiment will be 
described below with reference to Figs. 5 and 6, along 
with the service providing method of the embodiment. 
[0072] 

First, authentication requesting terminal 30 goes 
into the authentication process for utilization of the 
service A (S10) . The authentication process will be 



described in detail with reference to Fig. 6. The 
authentication requesting terminal 30 first transmits a 
message based on the authentication information to 
15 service verifying system 10 (Sll) . When receiving the 

message transmitted from authentication requesting 
terminal 30 (S12) , service verifying system 10 performs 
the authentication process based on the received 
message (S13) . Service verifying system 10 analyzes 
the authentication information in the message 
transmitted from authentication requesting terminal 30, 
to authenticate the authentication requesting terminal 
30 on the basis of the authentication information 
stored in authentication information DB 11. After 
completion of the authentication process, service 
verifying system 10 transmits the result of the 
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authentication to authentication requesting terminal 30 
(S14). Let us suppose herein that the user of 
authentication requesting terminal 30 is authenticated 
as a qualified user and the service A is available to 
the user. When the user of authentication requesting 
terminal 30 is not authenticated as a qualified user, 
authentication requesting terminal 30 is not allowed to 
utilize the service A. Authentication requesting 
terminal 30 receives the authentication result 
transmitted from service verifying system 10 (S15) . 
When the authentication result received by 



authentication requesting terminal 30 is one indicating 
the affirmative authentication, authentication 
requesting terminal 30 is allowed to utilize the 
service A. The flow heretofore is the same as in the 
conventional service verification network systems, and 
the authentication of the user is carried out in order 
to utilize the predetermined service. 
[0073] 

Reference is made again to Fig. 5. Next, 
authentication requesting terminal 30 transmits a 
utilization request for utilization of the service B 
different from the service A to service verifying 
system 10 (S20) . When receiving the utilization 
request for utilization of the other service 
transmitted from authentication requesting terminal 30 
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(S22) , service verifying system 10 determines whether 
the service B is available to the user of 
authentication requesting terminal 30 (S24) . 
Specifically, whether the service B is available is 
determined based on available service information DB 12 
storing the information about the service available to 
the user of authentication requesting terminal 30 by a 
contract or the like. Since the user is identified by 
the authentication process, the information about the 
available service is extracted from available service 
information DB 12. For example, where the user is one 



with user ID of U100, the service B is determined to be 
available (cf . Fig. 3) . Let us suppose herein that the 
service B is determined to be available. When the 

15 service B is determined to be available, service 

verifying system 10 assigns a permission ID (permission 
message) to distinguish a permission of utilization of 
the service B for the user, and updates the permission 
message status DB 13 (S26) . For example, suppose 

20 "A102" on the third line in permission message status 

DB 13 shown in Fig. 4 was added as a new permission 
message. The permission message is first added in the 
status of "available" (as indicated by "o» in Fig. 4) . 
[0074] 

25 Then service verifying system 10 transmits a 

permission response about the service B to the 
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utilization request/ to authentication requesting 
terminal 30 (S28) . When receiving the permission 
response (S30), authentication requesting terminal 30 
transmits the received permission response to service 
5 utilizing terminal 40. In the present embodiment, 

supposing authentication requesting terminal 30 is 
wirelessly communicable with service utilizing terminal 
40, authentication requesting terminal 30 wirelessly 
transmits the permission response to service utilizing 
10 terminal 40 (S32) , and service utilizing terminal 40 

receives the permission response (S34) . 
[0075] 

When receiving the permission response 
transmitted from authentication requesting terminal 30 

15 <S34), service utilizing terminal 40 prepares a message 

to request utilization of the service B, based on the 
permission response, and the service utilizing terminal 
40 transmits the prepared message to service verifying 
system 10 (S36) . When receiving the message 

20 transmitted from service utilizing terminal 40 (S38) , 

service verifying system 10 analyzes the permission 
message on which the received message is based, and 
retrieves the message status information from 
permission message status DB 13 (S40) . Subsequently, 

25 it is determined whether the permission message on 

which the received message is based is in the available 
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status and the consistency is determined about whether 
the received message itself is correctly configured, to 
determine the propriety of provision of the service 
(S46). For example, suppose the permission message 
extracted from the utilization request is "A102." 
According to permission message status DB 13, the 
status of the message is "o" and is thus judged as 
available, so that service verifying system 10 can 
provide the service for the service utilizing terminal 
40. Where the service is providable, permission 
message status releasing device 20 changes the status 
of the permission message stored in permission message 
status DB 13, from the available status into the 
unavailable status, so as to release the available 

status of the service B. 

[0076] 

Then service verifying system 10 transmits a 
permission response to service utilizing terminal 40 
(S4 8) and service utilizing terminal 40 receives the 
permission response transmitted from the service 
providing terminal (S50) , whereby service utilizing 
terminal 40 becomes allowed to utilize the service B. 
The above completes the operation flow of service 
verification network system 1 according to the present 
embodiment . 
[0077] 
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The service verifying system 10 (service 
verification network system 1) according to the present 
embodiment is provided with authenticating device 16 
for determining whether the service A is available, 
other service availability determining device 17 , and 
permission message status DB 13, and is configured to 
let authenticating device 16 identify the user and 
determine whether the service B is available, in the 
state in which the service A is made available. This 
makes it feasible to determine the availability of 
service B, without need for authentication. When the 



service B is determined to be available, the message 
status information indicating that the permission 
message is available in the permission of the 
utilization is stored into permission message status DB 
13 and the permission response based on the permission 
message is transmitted to authentication requesting 
terminal 30. This permits service verifying system 10 
to perform such operation that when the message based 
on the permission response is transmitted thereto, it 
provides the service B for service utilizing terminal 
4 0 having transmitted the message, without need for 
authentication. Therefore, where service verifying 
system 10 providing the service A starts providing new 
service B, service verifying system 10 can be prepared 
at low cost and in short time by making use of the 
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authentication result of service A by authenticating 
device 16, without need for constructing new 
authenticating device 16 for authenticating users 
authorized to utilize the service B. 
5 [0078] 

Since the service providing method according to 
the present embodiment is configured to identify the 
user of authentication requesting terminal 30 by the 
authenticating process, receive the utilization request 

.0 for utilization of service B in the state in which the 

service A is made available, and then perform the 
determination on the utilization of service B, it can 
determine the propriety of provision of service B by 
simply determining whether the service B is available 

L5 to the identified user, without need for new 

authentication. When the service B is determined to be 
available, the permission message is given to the 
permission of utilization thereof, the message status 
information indicating the status of "available" is 

20 stored into permission message status DB 13, and the 

permission response based on the permission message is 
transmitted to authentication requesting terminal 30. 
In the present service providing method configured in 
this manner, when the utilization request containing 

25 the permission message is transmitted, the service B 

can be provided for service utilizing terminal 4 0 
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having transmitted the utilization request, without 
authentication. Accordingly, where service verifying 
system 10 providing the service A starts providing new 
service B, service verifying system 10 can be prepared 
5 at low cost and in short time by making use of the 

authentication result of service A by authenticating 
device 16, without need for constructing new 
authenticating device 16 for authenticating users 
authorized to utilize the service B. 
10 [0079] 

(Second Embodiment) 



15 



20 



Next, the service verification network system 
according to the second embodiment of the present 
invention will be described. The service verification 
network system of the second embodiment is basically 
identical in structure as the service verification 
network system of the first embodiment, but is 
different in the structure of service verifying system 
10a. Fig. 7 is a block diagram showing the 

configuration of service verifying system 10a according 
to the second embodiment. As shown in Fig. 7, service 
verifying system 10a according to the second embodiment 
is further provided with area information storing 
device (referred to as "area information DB") 22, area 
25 information updating device 21, time information 

storing device {referred to as "time information DB") 
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24, and time information updating device 23, 
addition to the configuration of service verifying 
system 10 according to the first embodiment - 
[0080] 

Area information DB 22 is a database storing 
available area information about areas where the second 
service is available. Fig. 8 is an illustration 
showing an example of data stored in area information 
DB 22. Area information DB 22 stores each information 
of "permission ID" and "available area." "Permission 
ID" is identification information for identifying each 



permission message and is the same as that stored in 
permission message status DB 13. The "available area" 
is information about each area where the second service 

15 is available, and the service is not provided unless 

service utilizing terminal 40 is located within the 
available area. The available area information herein 
is associated with the permission ID, but the data 
structure does not always have to be constructed in 

20 this way; for example, the available area information 

may be stored in correlation with identification 
information of authentication requesting terminal 30 or 
the like, or may be stored independently of other 
information . 
25 [0081] 

Area information updating device 21 has a 
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function of updating area information DB 22. When 
other service availability determining device 17 
determines that the service B is available, area 
information updating device 21 derives an available 
5 area to make the service B available, from the staying 

area of authentication requesting terminal 30 having 
transmitted the request for the utilization of the 
service. For example, an area including the staying 
area of authentication requesting terminal 30 can be 
10 defined as an available area, or part of the staying 

area of authentication requesting terminal 30 can be 



defined as an available area. It is a matter of course 
that the available area can agree with the staying area 
of authentication requesting terminal 30. The 
15 available area information thus derived is stored into 

area information DB 22. When the staying area varies 
because of movement of authentication requesting 
terminal 30 for which the utilization of the other 
service has already been permitted and to which the 
20 message status information in permission message status 

DB 13 is available, authentication requesting terminal 
30 again transmits a utilization request for 
utilization of the other service. On this occasion, an 
available area is also derived from the staying area of 
25 authentication requesting terminal 30 and the available 

area information newly derived is stored to update area 



63 



FP03-0250-00 



information DB 22. Since the permission response to 
the utilization request for the other service has 
already been transmitted, no permission response is 
transmitted in this case. In this configuration, the 
5 available area can always be kept up-to-date in 

accordance with the staying area of authentication 
requesting terminal 30, and service verifying system 
10a needs to only update the permission message status 
DB 13 on the occasion of again receiving the request 
10 for utilization of the other service, without need for 

monitoring the staying area of every authentication 
requesting terminal 30 under connection, which can 
reduce the load on service verifying system 10. 
[0082] 

!5 Time information DB 24 is a database storing 

available time information about time periods in which 
the second service is available. Fig. 9 is an 
illustration showing an example of data stored in time 
information DB 24. Time information DB 24 stores each 

20 information of "permission ID" and "available time 

period." The "permission ID" is identification 

information for identifying each permission message and 
is the same as that stored in permission message status 
DB 13. The "available time period" is information 

25 about time periods in which the second service is 

available, and the service is not provided unless a 
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utilization request message of the second service is 
received within an available time period from the 
service utilizing terminal. The available time 

information herein is associated with the permission 
5 ID, but the data structure does not always have to be 

constructed in this way; for example, the available 
time information may be stored in correlation with the 
identification information of authentication requesting 
terminal 30 or the like, or it may be stored 
10 independently of other information. 

[0083) 



Time information updating device 23 has a 
function of updating time information DB 24. When 
other service availability determining device 17 
15 determines that the service B is available, time 

information updating device 23 sets an available time 
period in which the service B is made available. For 
example, each available time period can be set as a 
period of ten minutes after a time of making the 
20 determination on the utilization request for the other 

service, or available time periods can be set for 
respective services, e.g., five minutes for service B 
and ten minutes for service C different from service B. 
Then time information updating device 23 stores the set 
25 available time information into area information DB 22. 

[0084] 
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Next, the operation of the service verification 
network system according to the second embodiment will 
be described with reference to Fig. 10, along with the 
service providing method according to the second 
5 embodiment . 

[0085] 

First, authentication requesting terminal 30 goes 
into the authentication process for utilization of 
service A (S10) . This step is the same as the step of 
10 authentication in the first embodiment (cf . Fig. 6) . 

[0086] 

Next, authentication requesting terminal 30 
transmits a utilization request for utilization of 
service B different from the service A to service 

15 verifying system 10a (S20) . When receiving the 

utilization request for utilization of the other 
service transmitted from authentication requesting 
terminal 30 (S22) , service verifying system 10a 
determines whether the service B is available to the 

20 user of authentication requesting terminal 30 (S24) . 

Let us suppose herein that the service B is determined 
to be available. When the service B is determined to 
be available, service verifying system 10a assigns a 
permission ID to distinguish a permission of 

25 utilization of the service B for the user, and updates 

permission message status DB 13 (S26) . The permission 
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message is first added in the status of "available" (as 

indicated by symbol o in Fig. 4) . 

[0087] 

Subsequently, service verifying system 10a 
5 derives the available area information about an 

available area of the second service from the staying 
area of authentication requesting terminal 30 by area 
information updating device 21, and stores the 
information into area information DB 22. Service 
10 verifying system 10a also sets available time 

information about an available time period of the 



second service by time information updating device 23, 
and stores the information into time information DB 24. 
[0088] 

15 Then service verifying system 10a transmits a 

permission response based on a permission message about 
the service B to the utilization request, to 
authentication requesting terminal 30 (S28) . When 
receiving the permission response (S30) , authentication 

20 requesting terminal 30 transmits the received 

permission response to service utilizing terminal 40. 
In the present embodiment, supposing authentication 
requesting terminal 30 is wirelessly communicable with 
service utilizing terminal 40, authentication 

25 requesting terminal 30 wirelessly transmits the 

permission response to service utilizing terminal 40 
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(S32), and service utilizing terminal 40 receives the 
permission response (S34) „ 
[0089] 

When receiving the permission response 
transmitted from authentication requesting terminal 30 
(S34), service utilizing terminal 40 prepares a message 
to request utilization of the service B, based on the 
permission response, and the service utilizing terminal 
4 0 transmits the prepared message to service verifying 
system 10a (S3 6) . When receiving the message 

transmitted from service utilizing terminal 40 (S38) , 
service verifying system 10a analyzes the permission 
message on which the received message is based, and 
retrieves the message status information from 
15 permission message status DB 13 (S40) , Subsequently, 

it is determined whether the permission message on 
which the received message is based is in the available 
status and the consistency is determined about whether 
the received message itself is correctly configured, 
20 based on permission message status DB 13 . Service 

verifying system 10a of the second embodiment retrieves 
the information about the available area from area 
information DB 22 and retrieves the information about 
the available time period from time information DB 24 
25 (S43) • Then service verifying system 10a makes service 

provision propriety determining device 19 determine 
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whether service utilizing terminal 40 is located within 
the area indicated by the available area information 
stored in area information DB 22. Furthermore, service 
provision propriety determining device 19 determines 
whether the time when the utilization request message 
for the second service was received is within the 
available time period stored in the time information DB 
24. When these determinations end up with confirming 
that the service utilizing terminal is within the 
available area and that the message was transmitted 
within the available time period, service provision 
property determining device iy determines tnat rne 
second service is available (S46) . Where the service 
is providable, permission message status releasing 
15 device 20 changes the status of the permission message 

stored in permission message status DB 13, from the 
available status into the unavailable status, so as to 
release the available status of service B. 
[0090] 

20 Then service verifying system 10a transmits the 

permission response to service utilizing terminal 40 
(S48) and service utilizing terminal 40 receives the 
permission response transmitted from the service 
providing terminal (S50) , whereby service utilizing 

25 terminal 40 becomes able to utilize the service B . The 

above completes the operation flow of service 
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verification network system according to the present 

embodiment . 

[0091] 

Just as in the case of the service verifying 
system 10 according to the first embodiment, when 
service verifying system 10a providing the service A 
starts providing new service B, the service verifying 
system 10a of the second embodiment can utilize the 
authentication result of service A in authenticating 
device 16, without need for constructing new 
authenticating device 16 for authenticating users 
authorized to utilize the service B, whereby service 
verifying system 10a can be prepared at low cost and in 
short time, 
[0092] 

Furthermore, since service verifying system 10a 
of the second embodiment stores the available area 
information in area information DB 22 and permits the 
utilization of the service within the available area, 
it is feasible to limit the area for utilization of the 
service, whereby the security can be enhanced, while 
reducing opportunities of misuse. Since the available 
time information is stored in time information DB 24 to 
permit the utilization of the service within the time 
period, it is feasible to limit the time period for 
utilization of the service, whereby the security can be 
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enhanced, while reducing opportunities of misuse. 
[0093] 

In the service providing method according to the 
second embodiment, similar to the service providing 
5 method according to the first embodiment, where service 

verifying system 10a providing the service A starts 
providing new service B, service verifying system 10a 
can be prepared at low cost and in short time by making 
use of the authentication result of service A by the 
10 authenticating device 16, without need for constructing 

new authenticating device 16 to authenticate users 



authorized to utilize the service B. 
[0094] 

(Third Embodiment) 
15 Next, the service verification network system 

according to the third embodiment of the present 
invention will be described. The service verification 
network system of the third embodiment is basically 
identical in structure as the service verification 

20 network system 1 according to the first embodiment (cf. 

Fig. 1), but is different from service verification 
network system 1 of the first embodiment in the 
information included in the permission response 
transmitted from service verifying system 10 and in the 

25 information included in the utilization request 

transmitted from service utilizing terminal 40. The 
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differences from the service verification network 
system 1 of the first embodiment will be described 
below. 
[0095] 

When receiving a utilization request for 
utilization of the other service and determining that 
the other service is available, the communication 
device 14 of service verifying system 10 according to 
the third embodiment transmits a permission response, 
which is based on the available area information and 
the available time information, as well as the 



information about the permission message. In 
conjunction therewith, second message transmitting 
device 41 of service utilizing terminal 40 according to 
the third embodiment has a function of preparing a 
message of utilization request based on the available 
area information and the available time information, in 
addition to the information about the permission 
message, and transmitting the message to service 
verifying system 10. 
[0096] 

Next, the operation of the service verification 
network system according to the third embodiment will 
be described with reference to Fig. 11, along with the 
service providing method according to the third 
embodiment . 
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[0097] 

Since the operation of the service verification 
network system according to the third embodiment is 
basically the same as the operation of the service 
5 verification network system 1 according to the first 

embodiment, only differences will be described below 
from the operation of service verifying system 10 
according to the first embodiment. At step S28, on the 
occasion of transmitting the permission response for 

10 utilization of service B, the service verifying system 

transmits to the authentication requesting terminal 30 
the permission response based on the permission 
message, available area information, and available time 
information. After receiving the permission response 

15 at step S34, the service utilizing terminal 40, on the 

occasion of transmitting the utilization request 
message at step S36, then prepares the message based on 
the utilization request response based on the 
permission message, available area information, and 

20 available time information and transmits the message to 

service verifying system 10 <S36) . When receiving the 
message transmitted from service utilizing terminal 4 0 
(S38), service verifying system 10 checks, based on 
permission message status DB 13, the status of the 

25 permission message on which the message is based and 

the consistency about whether the received message 
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itself is correctly configured. Supposing the 

permission message on which the utilization request 
message is based is "A102," it is found that the status 
is "o," with reference to the permission message status 
5 DB 13- Then the service verifying system analyzes the 

utilization request area information and the 
utilization request time information on which the 
utilization request message received from service 
utilizing terminal 40 is based (S44) , to determine 

10 whether the staying area of service utilizing terminal 

40 is within the available area and whether the 
reception time of the utilization request message is 
within the available time period, thereby determining 
the propriety of provision of service B (S4 6) . 

15 [0098] 

The service verification network system and 
method according to the third embodiment, similar to 
the service verification network system 1 and method 
according to the first embodiment, enable the 

20 utilization of service B with the use of the 

authentication result of service A, so as to obviate 
the need for provision of the new authentication means 
for service B, whereby the service verifying system 10 
for provision of service B can be prepared at low cost 

25 and in short time. 

[0099] 
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Since the service verification network system of 
the third embodiment is configured so that the 
permission message status DB 13 of service verifying 
system 10 contains neither the available area 
information nor the available time information, the 
volume of data to be stored in service verifying system 
10 can be reduced- 
[0100] 

The above detailed the embodiments of the service 
verification network system according to the present 
invention, but it is noted that the present invention 



" is by no means intended to be limited to the above 
embodiments . 
[0101] 

15 For example, the above second embodiment was 

configured to use both the available area information 
and the available time information in order to 
determine whether the service B was available, but the 
system may also be configured to use either one of 

20 them. This configuration can increase the speed of the 

provision propriety determining process on the basis of 
decrease in the number of determination steps, while 
enhancing the security. 
[0102] 

25 T he service utilizing terminal may further 

comprise an identification information storing device 
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storing identification information to distinguish the 
terminal itself as additional information and may be 
configured to prepare the message of utilization 
request for service B, based on the identification 
5 information and the permission response received by 

authentication requesting terminal 30, and transmit the 
message to service verifying system 10. When this 
configuration is adopted, it is feasible to limit 
terminals permitted to utilize the second service, 
10 whereby the security can be enhanced. 

[0103] 

The service utilizing terminal may also further 
comprise an authentication information storing device 
to store authentication information as additional 
information and may be configured to prepare the 
message of utilization request for service B, based on 
the authentication information and the permission 
response received by authentication requesting terminal 
30, and transmit the message to service verifying 
system 10. By adopting this configuration, it is 
feasible to provide the second service more safely. 
[0104] 

From the invention thus described, it will be 
obvious that the embodiments of the invention may be 
varied in many ways. Such variations are not to be 
regarded as a departure from the spirit and scope of 
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the invention, and all such modifications as would be 
obvious to one skilled in the art are intended for 
inclusion within the scope of the following claims. 
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